General
- Target 2024-06-13_ad289a17225121b6a04c4507c84584ed_cryptolocker
- Size 50KB
- Sample240613-ydtp4ayekf
- SHA256 b00bfff42e1dc0b12311f369cc5c352c501b86a4542b6474a6273544b6aa5256
- MD5 ad289a17225121b6a04c4507c84584ed
- SHA1 79af009595ce4622a7466c8f5b11284f7b1d1315
- SHA512 0e00104e1d851f5b9b86008bc4a19585c86b1c36fea4abdd56956030193ab2bdafa361c6caa98076fcbcd640c0441f345ce30c4eb4714d2d46984ab840c66ea9
- SSDEEP 768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ndk:vj+jsMQMOtEvwDpj5HczerLO04BSk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-13_ad289a17225121b6a04c4507c84584ed_cryptolocker.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_ad289a17225121b6a04c4507c84584ed_cryptolocker.exe
Resource
win10v2004-20240508-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_ad289a17225121b6a04c4507c84584ed_cryptolocker
- Size 50KB
- SHA256 b00bfff42e1dc0b12311f369cc5c352c501b86a4542b6474a6273544b6aa5256
- MD5 ad289a17225121b6a04c4507c84584ed
- SHA1 79af009595ce4622a7466c8f5b11284f7b1d1315
- SHA512 0e00104e1d851f5b9b86008bc4a19585c86b1c36fea4abdd56956030193ab2bdafa361c6caa98076fcbcd640c0441f345ce30c4eb4714d2d46984ab840c66ea9
- SSDEEP 768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ndk:vj+jsMQMOtEvwDpj5HczerLO04BSk
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL